MAL-2025-5119 Malicious code in myownpyfiglet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 feb59db3efc9397070b6fcdf08762e0defb77d34e5ababf463e3c1a7a1f5b927 Malicious clone of pyfiglet. Importing the package starts a series of downloading and executing of obfuscated malicious scripts, partially identified by AVs. -...

MAL-2025-5127 Malicious code in requestpackat (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b70e437edd04a30f48e384a4a07cdb1790dcb5e6a66ba800dc1703bf845a6b36 Code download and runs an executable, which is widely recognized as malware. The system is also configured to run it on startup, and the file is saved in paths...

MAL-2025-5112 Malicious code in discorddox (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 52f656f62a0fe1e90282cf7e8004bfd78e69a854e5e7a9c33ef72b7e5b43b831 The package contains an embedded malicious executable probably blank grabber started when running the module. Probably continuation of 2025-05-pydoxing ---...

CVE-2025-47271: Improper Control of Generation of Code

The OZI action is a GitHub Action that publishes releases to PyPI and mirror releases, signature bundles, and provenance in a tagged release. In versions 1.13.2 through 1.13.5, potentially untrusted data flows into PR creation logic. A malicious actor could construct a branch name that injects...

MAL-2025-3741 Malicious code in dial-xl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 129b71dc44955e560cd56ff53e0be19aced751699016fa96cb04ee75d2e76e3b Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

Malicious code in dial-xl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 129b71dc44955e560cd56ff53e0be19aced751699016fa96cb04ee75d2e76e3b Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

MAL-2025-3744 Malicious code in program-admin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 79810d0cd56c8a3266dcbe5827dd3d27eb976b353c7b17940a29dddc602df4f7 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

MAL-2025-3743 Malicious code in iconnect (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e53aae69656f138607d0de8abe11d4b48ed6156875f07ec0da7485dd776f7158 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

MAL-2025-3742 Malicious code in document-inference (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0519099776ddb5cbd1778fa5f043a1cad34d94d5116ae895120aba38608e7eb0 Packages that seem to be created by a legit bug bounty hunter. Designed to look like created by different organisations, they contain a couple of data...

MAL-2025-4232 Malicious code in pyinitialyze (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 17fb73bd9014366b80018d085cf68a67535ca979bd2ddd14c82ef27ec1309a61 File is designed to download, hide under system-like name, and run a remote executable, widely identified as malicious. --- Category: MALICIOUS - The campaign...

MAL-2025-6524 Malicious code in initer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d2aac1e40660cbe4323a93d03087f3b9a2d596a5dcfcf2bae3cb0a2ab37cf646 File is designed to download, hide under system-like name, and run a remote executable, widely identified as malicious. --- Category: MALICIOUS - The campaign...

MAL-2025-4254 Malicious code in veriftest1asdlaaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 18d30d48c72a61cda2e8b0ecd3a27b958e8964b4c65833cb780186382285101d During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-4253 Malicious code in veriftest1asdlaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8ca63296b7d7f9b656944bcaf65cc918b709a2071d1ea5f16d1a7422a9df931e During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-4251 Malicious code in veriftest1asdla (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e04795c3a8f7fae13a125bde307aa64db04ae9f4ff76bd1d11fb32b4d3f57a36 During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in testveriftest1asdlaaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b241cae62c005e3cd31a8251941ab101ebcca75aa4c8cb988905e87529339cd During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-4252 Malicious code in veriftest1asdlaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 84fe70a8f5e34c8334d7284bcc9b71826210f029708a53a6ec4b9bb90a33054b During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-3602 Malicious code in testveriftest1asdlaaaa (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3b241cae62c005e3cd31a8251941ab101ebcca75aa4c8cb988905e87529339cd During installation, the package attempts to exfiltrate cloud tokens --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

21cmpsdenoiser (>=1.0.0, <=1.0.2), 2404-segmentation-pipeline (>=0.1.0, <=1.0.0) +28224 more potentially affected by CVE-2025-4287 via torch (>=1.0.0, <=2.14.0)

torch PYPI version =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =2.13.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2025-4287 Source advisory: SNYK:PYTHON-TORCH-10332643...

MAL-2025-4224 Malicious code in meowsapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f59e6347816a732ab5ddebfd141e113bb5cca799fa8b8466f194dbff1a1e428b Importing the module starts delayed downloading and starting a remote executable identified as BlankGrabber infostealer. --- Category: MALICIOUS - The campaign...

MAL-2025-5140 Malicious code in trongridlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 810f3d44ffd0654acef07cf5bc57e4c1c8daa207332751a60c14f29f64832560 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...